Certifications
Obtained: October 2024
- Fundamental computer and networking knowledge
- Solid understanding of popular operating systems
- Best IT practices
- Knowledge of virtualization and cloud computing
Obtained: November 2024
- Understand and implement basic network designs, including LAN, WAN, and wireless networks
- Configure and manage routers, switches, and other critical network hardware
- Understand essential networking protocols (TCP/IP, DNS, DHCP) and industry standards
- Identify and mitigate basic network security vulnerabilities and implement secure network practices
Obtained: November 2024
- Identify and mitigate security risks to protect systems and data
- Recognize and respond to cyber threats like malware and phishing
- Understand key regulations and security best practices to meet industry standards
- Configure firewalls, VPNs, and access controls to safeguard networks
Obtained: January 2025
- Identify and analyze cyber threats using SIEM tools (Splunk, ELK, QRadar) and threat intelligence frameworks
- Conduct vulnerability scanning (Nessus, OpenVAS), analyze CVSS scores, and prioritize remediation
- Follow the Incident Response (IR) lifecycle, analyze malware, and use forensic tools for investigations
- Implement firewalls, IDS/IPS (Snort, Suricata), endpoint protection, and secure cloud environments
- Utilize SOAR, scripting (Python, Bash, PowerShell) for automation, and apply best practices for system hardening
Obtained: February 2025
- Understand the full pentesting lifecycle, from planning to reporting
- Identify, analyze, and exploit security weaknesses in network systems and applications
- Proficient with tools like Metasploit, Nmap, Burp Suite, and Wireshark for security testing
- Document findings, provide risk analysis, and deliver recommendations to stakeholders
- Knowledge of defensive measures, best practices, and ways to mitigate risks post-exploitation
Obtained: September 2023
- Understand legal, regulatory, and policy requirements in cybersecurity
- Recognize and respond to potential security incidents
- Identify and mitigate basic threats to network infrastructure
- Apply techniques to secure systems and manage user permissions effectively
Obtained: March 2025
- Understand the core principles and key concepts of IT Service Management
- Learn how IT services align with business goals to create value for customers and stakeholders
- Gain knowledge of key ITIL practices like incident management, change enablement, and service request management
- Understand the service value system (SVS) and the service value chain to deliver efficient IT services
Obtained: November 2024
- Understand the core principles and key concepts of IT Service Management
- Learn how IT services align with business goals to create value for customers and stakeholders
- Gain knowledge of key ITIL practices like incident management, change enablement, and service request management
- Understand the service value system (SVS) and the service value chain to deliver efficient IT services
Obtained: January 2025
- Understand the core principles and key concepts of IT Service Management
- Learn how IT services align with business goals to create value for customers and stakeholders
- Gain knowledge of key ITIL practices like incident management, change enablement, and service request management
- Understand the service value system (SVS) and the service value chain to deliver efficient IT services
Obtained: April 2025
- Applied frameworks such as MITRE ATT&CK, Cyber Kill Chain, and NIST CSF in simulated incident response.
- Conducted real-time log and network traffic analysis to detect threats using SIEM tools like Splunk.
- Investigated malware, endpoint compromises, and web application attacks using live environments and EDR tools.
- Demonstrated knowledge of core security concepts including threat intelligence, encryption, and network protocols.
- Triaged alerts, escalated incidents, and documented findings in SOC-style simulations under timed conditions.
Obtained: June 2025
- Identified and mitigated OWASP API Security Top 10 vulnerabilities through real-world API testing labs.
- Applied secure authentication and authorization practices using OAuth 2.0, JWT, and API keys.
- Discovered excessive data exposure, broken object-level authorization, and other logic flaws in API endpoints.
- Hardened API configurations including rate limiting, CORS policies, and error handling in simulated environments.
- Passed a 100-question proctored exam demonstrating practical API security knowledge and defense strategies.
Skills
Linux
SQL
Python
CI/CD
DevSecOps
DirBuster
Enum4linux
Gitleaks
Dependabot
Semgrep
DAST
SAST
Docker
Git
Burp Suite
OWASP API Top 10
OWASP Top 10
STRIDE
ffuzz/wfuzz
JWT Debugger
Request Manipulation
MITRE ATT&CK
Cyber Kill Chain
Projects
Password Generator
Port Scanner
Hangman Game
Guess the Number
Expense Tracker
Who I Am
I'm a tech enthusiast that enjoys learning all of the newest and latest technologies. I've loved learning about tech since I was 4 years old when my family got our first computer. I was a gamer at an early age and learned how to install mods for minecraft and set up servers on my own. I love to tinker around with all sorts of tech gadgets and learn how to troubleshoot new problems I encounter.
I hold a B.S. in Cybersecurity and Information Assurance from Western Governors University, and have earned several industry recognized certifications such as CompTIA Pentest+ and CompTIA CySA+. I am currently continuing my education and skills by building home labs, personal projects, and working towards earning more relevant certifications.
My goals are to learn all that I can about the latest tech and how to prevent the latest forms of cyber attacks, and to help others learn and prevent them as well. I hope to be an incredible asset to a team or companies to help fortify against these latest attacks.